This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/b470Y8D-LyTq_9_AQrtWwIG1GtU.roa File: b470Y8D-LyTq_9_AQrtWwIG1GtU.roa (raw, json) Hash identifier: nOWmpviy/236qMTiNZKfN8s+LeOU6GzEwsaYJPTlSts= Subject key identifier: 6F:8E:F4:63:C0:FE:2F:24:EA:FF:DF:C0:42:BB:56:C0:81:B5:1A:D5 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019B7B36CF2AF061B22D681219493AD4245E Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/b470Y8D-LyTq_9_AQrtWwIG1GtU.roa Signing time: Thu 01 Jan 2026 20:19:08 +0000 ROA not before: Thu 01 Jan 2026 20:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28968 IP address blocks: 62.181.34.0/23 maxlen: 23 62.181.36.0/22 maxlen: 22 62.181.38.0/24 maxlen: 24 62.181.46.0/23 maxlen: 23 62.181.56.0/21 maxlen: 24 62.181.56.0/22 maxlen: 24 62.181.58.0/23 maxlen: 23 77.232.32.0/23 maxlen: 23 77.232.35.0/24 maxlen: 24 77.232.48.0/23 maxlen: 23 212.59.96.0/21 maxlen: 21 212.59.108.0/23 maxlen: 23 212.59.108.0/24 maxlen: 24 212.59.109.0/24 maxlen: 24 2a00:f460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:cf:2a:f0:61:b2:2d:68:12:19:49:3a:d4:24:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Jan 1 20:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f8ef463c0fe2f24eaffdfc042bb56c081b51ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:44:03:82:ef:a6:66:33:ef:3e:8c:d7:4e:cb: 33:2e:dd:8d:cd:a1:fc:cb:a7:ea:38:4f:af:6b:40: 2b:f1:61:b2:bf:1e:80:80:0f:a4:5a:53:67:70:36: 2a:98:7b:5f:34:79:39:a4:32:22:a6:1a:7d:88:96: 16:cd:30:38:b6:d1:a0:94:21:02:96:3b:6a:bf:8f: 13:1f:64:c4:ba:f1:49:0a:5a:71:df:b5:e8:ad:95: 8e:0a:bf:aa:e0:1e:fc:f7:5c:4f:aa:50:17:a1:d0: ea:24:61:07:a7:a5:57:c7:83:bf:7c:ae:e6:9f:33: 9b:d8:ad:bd:10:5d:be:08:04:6a:f8:c6:b2:63:07: 00:e3:91:45:8e:a3:b2:34:97:2b:e3:73:a4:4b:5b: 57:08:79:a6:8c:94:01:5d:88:63:2c:98:22:5a:90: e7:31:ab:8d:55:ec:b6:3b:20:b7:e4:77:2f:ef:67: 50:2f:6e:ab:54:49:64:fb:7b:07:d1:37:c5:2d:85: 42:f5:a7:1e:b7:cb:17:4f:59:c7:4f:10:7f:27:1c: 13:a1:a3:09:8a:19:5a:9c:a6:54:13:0e:c4:61:c5: a1:61:ba:d4:ad:4f:b5:38:91:dc:4c:d8:16:b6:8a: 7d:d7:25:5d:2f:81:c8:9c:77:91:9d:42:fb:0a:11: 35:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8E:F4:63:C0:FE:2F:24:EA:FF:DF:C0:42:BB:56:C0:81:B5:1A:D5 X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/b470Y8D-LyTq_9_AQrtWwIG1GtU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.181.34.0-62.181.39.255 62.181.46.0/23 62.181.56.0/21 77.232.32.0/23 77.232.35.0/24 77.232.48.0/23 212.59.96.0/21 212.59.108.0/23 IPv6: 2a00:f460::/32 Signature Algorithm: sha256WithRSAEncryption 33:fc:e3:17:63:2c:e5:9a:3d:a0:8f:86:a6:ef:af:da:15:7a: 5f:81:7c:3d:65:ce:b6:5b:24:54:26:c4:1d:03:9d:84:38:3f: 3d:a0:ec:3f:08:c3:07:09:12:f9:d4:be:07:8d:13:2d:db:97: c4:de:32:96:64:06:4f:d8:23:dc:37:c6:ee:5c:4c:ef:06:4f: 4a:72:8b:9d:56:78:f4:41:8e:ba:20:48:24:68:ee:c7:ce:cb: ed:87:8f:f2:02:6e:8c:43:8d:cf:09:bc:e2:90:6b:98:31:a1: 6e:23:e9:49:d7:b0:d4:90:fe:2d:5e:d3:92:ad:b5:3d:22:29: 59:53:ef:0d:d2:5e:4e:89:66:c8:57:e7:57:58:a4:a0:00:6e: 3d:ee:d9:c5:4d:85:09:74:d1:4b:45:d5:7b:d9:a9:74:c6:66: e0:12:70:f3:cd:0a:57:eb:99:ee:9f:ea:c4:13:67:4b:da:60: 8d:dd:b5:d0:4d:6a:2b:68:6f:70:83:44:d0:2a:d6:c4:44:19: dc:a0:2b:07:29:a0:36:ac:01:f4:1e:08:a6:39:21:32:f8:f5: 51:72:e6:77:1f:e2:1e:60:14:32:42:9d:3c:c9:15:42:49:9d: 70:38:45:ab:3b:11:a1:3e:23:3a:d4:d5:69:4f:69:e6:1d:4b: 9f:53:83:96 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZt7Ns8q8GGyLWgSGUk61CReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjYwMTAxMjAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjhlZjQ2M2MwZmUyZjI0ZWFmZmRmYzA0MmJiNTZjMDgxYjUxYWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEQDgu+mZjPvPozXTsszLt2NzaH8 y6fqOE+va0Ar8WGyvx6AgA+kWlNncDYqmHtfNHk5pDIiphp9iJYWzTA4ttGglCEC ljtqv48TH2TEuvFJClpx37XorZWOCr+q4B7891xPqlAXodDqJGEHp6VXx4O/fK7m nzOb2K29EF2+CARq+MayYwcA45FFjqOyNJcr43OkS1tXCHmmjJQBXYhjLJgiWpDn MauNVey2OyC35Hcv72dQL26rVElk+3sH0TfFLYVC9acet8sXT1nHTxB/JxwToaMJ ihlanKZUEw7EYcWhYbrUrU+1OJHcTNgWtop91yVdL4HInHeRnUL7ChE1YQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG+O9GPA/i8k6v/fwEK7VsCBtRrVMB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvYjQ3MFk4RC1MeVRxXzlfQVFydFd3SUcxR3RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA+BAIAATA4MAwDBAE+tSID BAM+tSADBAE+tS4DBAM+tTgDBAFN6CADBABN6CMDBAFN6DADBAPUO2ADBAHUO2ww DQQCAAIwBwMFACoA9GAwDQYJKoZIhvcNAQELBQADggEBADP84xdjLOWaPaCPhqbv r9oVel+BfD1lzrZbJFQmxB0DnYQ4Pz2g7D8IwwcJEvnUvgeNEy3bl8TeMpZkBk/Y I9w3xu5cTO8GT0pyi51WePRBjrogSCRo7sfOy+2Hj/ICboxDjc8JvOKQa5gxoW4j 6UnXsNSQ/i1e05KttT0iKVlT7w3SXk6JZshX51dYpKAAbj3u2cVNhQl00UtF1XvZ qXTGZuAScPPNClfrme6f6sQTZ0vaYI3dtdBNaitob3CDRNAq1sREGdygKwcpoDas AfQeCKY5ITL49VFy5ncf4h5gFDJCnTzJFUJJnXA4Ras7EaE+IzrU1WlPaeYdS59T g5Y= -----END CERTIFICATE-----Generated at Mon Jan 26 08:04:36 2026 by rpki-client